Vincent Koc 54cc90b1b1 fix(release): publish ClawHub bootstrap artifacts immutably (#103809) ...

* fix(release): harden ClawHub bootstrap

* fix(release): centralize publication artifact verification

* fix(release): harden publication artifact verification

* fix(release): lock ClawHub bootstrap toolchain

* test(release): assert locked ClawHub binary

* fix(release): pack with trusted ClawHub harness

* fix(release): bound beta verifier artifact reads

* fix(release): bind target and tooling identities

* fix(release): stabilize signed package ordering

* fix(release): bind ClawHub pretag proof

* fix(release): bind ClawHub OIDC readback

* fix(release): bind ClawHub OIDC readback

2026-07-10 13:33:20 -07:00

..

android-release.yml

feat: show build identity in About screens (#103595)

2026-07-10 10:42:36 +01:00

auto-response.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

ci-build-artifacts-testbox.yml

fix(ci): preserve all package runtime artifacts

2026-07-08 23:12:03 -07:00

ci-check-arm-testbox.yml

fix(ci): avoid relinking identical node tools

2026-06-24 02:43:25 +08:00

ci-check-testbox.yml

ci: keep native landing validation off queued Blacksmith capacity (#101196)

2026-07-06 23:14:27 +01:00

ci.yml

fix(qa): simplify smoke lanes and isolate fanout (#102262)

2026-07-10 09:48:40 -07:00

clawsweeper-dispatch.yml

fix(ci): filter ClawSweeper comment dispatches before token minting (#95308)

2026-06-21 19:05:08 +08:00

codeql-android-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql-critical-quality.yml

fix: ignore test-only network CI guard lines (#99233)

2026-07-02 16:18:21 -05:00

codeql-macos-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql.yml

ci: add process exec CodeQL security shard (#92667)

2026-07-02 12:50:45 +00:00

control-ui-locale-refresh.yml

fix(ci): preflight generated PR app permissions (#103671)

2026-07-10 12:57:30 +01:00

crabbox-hydrate.yml

chore(ci): dedupe Crabbox Docker check (#97950)

2026-06-29 16:22:44 -07:00

dependency-guard.yml

feat(ci): autoscrub dependency lockfile-only PR changes (#87796)

2026-05-29 19:37:16 -07:00

docker-release.yml

feat: show build identity in About screens (#103595)

2026-07-10 10:42:36 +01:00

docs-agent.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

docs-sync-publish.yml

ci: pin ClawHub docs checkout branch

2026-07-05 08:17:32 -04:00

docs-translate-trigger-release.yml

ci: dispatch aggregate docs translations

2026-05-06 20:24:03 +01:00

docs.yml

ci: pin ClawHub docs checkout branch

2026-07-05 08:17:32 -04:00

duplicate-after-merge.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

full-release-validation.yml

fix(release): make validation proof no-write (#103737)

2026-07-10 08:18:44 -07:00

install-smoke-reusable.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

install-smoke.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

ios-periphery-comment.yml

fix(ci): tolerate periphery comment permission denials

2026-07-06 11:18:58 +02:00

ios-periphery.yml

chore(swift): enforce current formatting and lint rules (#103313)

2026-07-10 11:54:08 +01:00

labeler.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

live-media-runner-image.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

macos-release.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

maintainer-command-reactions.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

mantis-discord-smoke.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-discord-status-reactions.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-discord-thread-attachment.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-scenario.yml

ci(mantis): add web UI chat proof lane (#100472)

2026-07-07 10:54:35 +01:00

mantis-slack-desktop-smoke.yml

feat(qa-lab): add Codex Slack approval scenarios (#91519)

2026-07-05 22:47:18 +01:00

mantis-telegram-desktop-proof.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-telegram-live.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-web-ui-chat-proof.yml

ci(mantis): add web UI chat proof lane (#100472)

2026-07-07 10:54:35 +01:00

maturity-scorecard.yml

fix(ci): harden maturity scorecard publication (#103722)

2026-07-10 15:25:15 +01:00

native-app-locale-refresh.yml

fix(ci): preflight generated PR app permissions (#103671)

2026-07-10 12:57:30 +01:00

npm-telegram-beta-e2e.yml

fix(release): make validation proof no-write (#103737)

2026-07-10 08:18:44 -07:00

openclaw-cross-os-release-checks-reusable.yml

fix(release): make validation proof no-write (#103737)

2026-07-10 08:18:44 -07:00

openclaw-live-and-e2e-checks-reusable.yml

fix(release): keep no-push Docker images validation-only (#103891)

2026-07-10 12:02:57 -07:00

openclaw-npm-release.yml

fix(release): keep validation evidence immutable across reruns (#103906)

2026-07-10 20:16:19 +01:00

openclaw-performance.yml

fix(ci): select full Kova performance reports (#103863)

2026-07-10 19:01:30 +01:00

openclaw-release-checks.yml

fix(ci): run Telegram release QA from trusted harness (#103207)

2026-07-10 11:32:24 -07:00

openclaw-release-publish.yml

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

openclaw-release-telegram-qa.yml

fix(ci): run Telegram release QA from trusted harness (#103207)

2026-07-10 11:32:24 -07:00

openclaw-scheduled-live-checks.yml

fix(release): keep no-push Docker images validation-only (#103891)

2026-07-10 12:02:57 -07:00

openclaw-stable-main-closeout.yml

fix(release): keep validation evidence immutable across reruns (#103906)

2026-07-10 20:16:19 +01:00

opengrep-precise-full.yml

fix(ci): require OpenGrep SARIF artifacts

2026-06-23 14:08:20 +08:00

opengrep-precise.yml

fix(ci): require OpenGrep SARIF artifacts

2026-06-23 14:08:20 +08:00

package-acceptance.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

plugin-clawhub-new.yml

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

plugin-clawhub-release.yml

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

plugin-init-scaffold-validation.yml

feat: scaffold provider plugins from init (#94352)

2026-06-26 16:43:51 -07:00

plugin-npm-release.yml

ci(release): add plugin npm artifact preflight (#103759)

2026-07-10 09:39:10 -07:00

plugin-prerelease.yml

fix(release): make validation proof no-write (#103737)

2026-07-10 08:18:44 -07:00

qa-live-transports-convex.yml

fix(qa): keep runtime parity tiers flow-compatible (#103609)

2026-07-10 10:51:13 +01:00

qa-profile-evidence.yml

ci: default maturity evidence to all profile (#96595)

2026-06-24 17:32:25 -07:00

real-behavior-proof.yml

fix(ci): use workflow revision for proof checks

2026-06-23 07:11:23 +08:00

sandbox-common-smoke.yml

fix(sandbox): install supported node in common image

2026-06-24 22:54:00 +08:00

security-sensitive-guard.yml

ci: remove security guard rollout floor

2026-07-01 21:21:31 -05:00

stale.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

test-performance-agent.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

update-migration.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

website-installer-sync.yml

ci: pin website checkout branch

2026-07-05 08:37:59 -04:00

windows-blacksmith-testbox.yml

fix(ci): finalize Windows Testbox after setup failures

2026-06-23 11:47:10 +08:00

windows-node-release.yml

ci: gate stable releases on Windows companion assets (#92555)

2026-06-13 19:33:33 -07:00

windows-testbox-probe.yml

ci(windows): clarify WSL2 reboot requirement

2026-06-22 20:18:24 +02:00

workflow-sanity.yml

chore(ci): dedupe workflow sanity checkout (#97946)

2026-06-29 16:21:41 -07:00